
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A fast, GPU-accelerated terminal multiplexer in your browser or as a native macOS app. Split panes, organize projects, sync with your editor, detect AI agents.
A fast, GPU-accelerated terminal multiplexer that runs in your browser — or as a native macOS app. Split panes, organize projects, sync with your editor, and detect AI agents and dev servers automatically. One npm install, no config.
Website: paneful.dev

npm i -g paneful
paneful # Start server and open browser
paneful --port 8080 # Use a specific port
paneful --spawn # Add current directory as a project
paneful --list # List all projects
paneful --kill my-project # Kill a project by name
paneful update # Update to the latest version
paneful --install-app # Install as a native macOS app
Five layout presets — columns, rows, main + stack, main + row, and grid. Cycle through them with Cmd+T or auto-reorganize with Cmd+R.
Organize terminals by project. Each project gets its own layout, panes, and working directory. Switch instantly from the sidebar. Drag the right edge to resize — width persists across sessions.
Drag folders from Finder into the sidebar to create projects with the path pre-filled. Drag files into terminal panes to paste their paths as shell-escaped arguments.
Automatically switches the active project based on which editor window is in focus. Works with VS Code, Cursor, Zed, and Windsurf on macOS. Toggle via the monitor icon in the sidebar header.
Requires:
Save a workspace layout as a favourite — name, layout preset, and per-pane commands. Launch any favourite with a click to instantly recreate the setup.
Terminals render via WebGL2 on the GPU by default, which is significantly faster for high-throughput output and multiple panes. Toggle it from the sidebar header (lightning bolt icon) or the command palette. Falls back to the DOM renderer automatically if WebGL2 is unavailable or context is lost. The setting persists across sessions.
Press Cmd+F in any focused terminal to search its scrollback. Navigate matches with Enter / Shift+Enter or the up/down buttons. Press Escape to close.
Press Cmd+P to open the command palette. Quickly switch projects, launch favourites, change layouts, or run any action — all from one fuzzy-searchable list.
The sidebar shows the current Git branch next to each project's working directory as a small pill badge. Updates automatically every 10 seconds. Non-git directories show no badge.
Automatically detects when Claude Code or Codex CLI is running in a Paneful terminal. A purple AI badge appears next to the project name in the sidebar — pulsing when the agent is actively working, dimmed when idle. Disappears instantly when the agent exits. Uses zero filesystem access; detection is purely in-memory via the PTY process name and terminal output timestamps.
Automatically detects when a dev server starts in a terminal (Vite, Next.js, Angular, etc.). A green dot appears next to the project name in the sidebar while the port is alive, and disappears when it stops. Tracks ports per-terminal so the same port across different projects is handled correctly.
Click the broom icon in the sidebar header to scan for projects whose directories no longer exist on disk. A confirmation modal shows matching projects before removing them.
Press Cmd+R or click the dashboard icon in the toolbar to automatically pick the best layout for your current pane count.
Install Paneful as a standalone macOS app with its own Dock icon and window:
paneful --install-app
A folder picker dialog lets you choose the install location (defaults to /Applications). The app launches Paneful in a native WebKit window — no browser tab needed. Updating via paneful update automatically rebuilds the .app in place.
Install the Paneful extension from the VS Code Marketplace. Works with VS Code, Cursor, and other VS Code-based editors.
Commands (via Command Palette):
paneful update
Checks npm for the latest version, installs it globally, and rebuilds the native .app if one is installed. The Dock icon stays valid automatically.
Paneful checks for newer versions on npm and shows a notification in the sidebar when an update is available.
| Shortcut | Action |
|---|---|
Cmd+P | Command palette |
Cmd+F | Search terminal scrollback |
Cmd+N | New pane (vertical split) |
Cmd+Shift+N | New pane (horizontal split) |
Cmd+W | Close focused pane |
Cmd+1-9 | Focus pane by index |
Cmd+Arrow | Line start / end in terminal |
Ctrl+Shift+Arrow | Move focus to adjacent pane |
Shift+Arrow | Swap focused pane with adjacent |
Cmd+D | Toggle sidebar |
Cmd+T | Cycle through layout presets |
Cmd+R | Auto reorganize panes |
npm install && cd web && pnpm install && cd ..
# Dev server (Vite frontend + Node.js backend, hot reload)
npm run dev
# Production build
npm run build
# Run locally
npm start
Vite dev server proxies /ws and /api to localhost:3000. Open http://localhost:5173 or use Chrome in app mode for full keyboard shortcut support:
"/Applications/Google Chrome.app/Contents/MacOS/Google Chrome" --app=http://localhost:5173
npx paneful)FAQs
A fast, GPU-accelerated terminal multiplexer in your browser or as a native macOS app. Split panes, organize projects, sync with your editor, detect AI agents.
We found that paneful demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.